3-15
CiscouBR924 Software Configuration Guide
OL-0337-05 (8/2002)
Chapter3 Advanced Data-Only Configurations
IPSec (56-bit) Example
no service finger
!
access-list 200 permit ip host 10.1.0.25 30.1.1.0 0.0.0.255
!
line con 0
exec-timeout 0 0
transport input none
line vty 0 4
login
!
end
Note The above configuration assumes that the DHCP server assigns an IP address to the cable interface that
is in the class A private network (10.0.0.0).
Additional Documentation
Establishing IPSec encryption between two or more end-points requires a thorough underst anding of the
Internet Key Exchange (IKE) mechanism, which is a form of the ISAKMP/Oakley (Inter net Security
Association Key Management Protocol) that is used for IPSec encryption. Digital certificates must also
be understood if this mechanism is going to be used for authentication. Finally, if IPSec will be used as
part of a virtual private network (VPN), those concepts must be und erstood as well.
For general information on these subjects, see the following information in the product literature and IP
technical tips sections on CCO:
•Deploying IPSec—Provides an overview of IPSec encryption and its key concepts, along with
sample configurations. Also provides a link to many other documents on relate d topics.
•Certificate Authority Support for IP Sec Overview—Describes the concept of digital certificates and
how they are used to authenticate IPSec users.
•An Introduction to IP Security (IPSec) Encryption—Provides a step-by-step description of how to
configure IPSec encryption.
The following technical documents, available on CCO and the Documentation CD-ROM, also provide
more in-depth configuration information:
•Cisco IOS Release 12.1 Security Configuration Guide—Provides an overview of Cisco IOS security
features.
•Cisco IOS Release 12.0 Security Command Reference—Provides a reference for each of the
CiscoIOS commands used to configure IPSec encryption and related security features.
•Cisco IOS Software Release 12.1 Command Summary—Summarizes the Cisco IOS commands used
to configure all Release12.0 security features.
Note Additional documentation on IPSec becomes available on CCO and the Documentation CD-ROM as new
features and platforms are added.